Redeemer Health Tracking Pixel Settlement Opens Patient Claims

About the Redeemer Health Settlement

Patients who used Redeemer Health or Holy Redeemer Health websites and patient portals between January 2019 and March 2023 can possibly submit claims for compensation from a healthcare data privacy settlement. 

The class action lawsuit alleged that Redeemer Health’s medical websites improperly shared patient information with third parties, including Meta and Google, without authorization, potentially violating Health Insurance Portability and Accountability Act (HIPAA) privacy protections.

Why Redeemer Health Patients Sued

The Redeemer Health class action lawsuit claims that the healthcare provider embedded third-party tracking technologies on its websites and patient portal login pages.

These "tracking pixels" allegedly transmitted patients' personal health information to external companies without proper consent or HIPAA-compliant safeguards. 

The lawsuit alleges that every time patients used the online platform, tracking technologies captured the following activity and shared it with companies that are claimed to have had no legitimate need for such sensitive medical information including:

• Account login info
• Checked test results
• Scheduled appointments
• Communications with healthcare providers

Healthcare attorneys representing the class argue that this data collection violated fundamental privacy rights protected under federal healthcare laws.

Understanding the HIPAA Allegations

This healthcare settlement focuses on failures to implement proper safeguards when using website analytics tools.

HIPAA requires, in relevant part, that all third parties with access to protected health information sign specific agreements, ensuring they will safeguard patient data in accordance with federal standards. 

Class plaintiffs allege that Redeemer Health's marketing technologies violated HIPAA privacy laws when the company deployed the technology on its medical websites without proper safeguards.

While Redeemer Health denies wrongdoing, the settlement requires the implementation of HIPAA-compliant tracking practices and the securing of business associate agreements in the future. 

Who Can File a HIPAA Violation Claim

Current and former patients of Redeemer Health or Holy Redeemer Health who used specific online services during the class period from January 1, 2019, to March 21, 2023 may possibly participate in this settlement.

Potential class members include anyone who accessed healthcare services through the digital platforms during the class period, regardless of how frequently they used these online tools.

The settlement also acknowledges that even a single instance of using the following web properties during the class period may have potentially exposed patient information to unauthorized third parties through alleged tracking pixel violations:

• Main website pages at www.redeemerhealth.org.
• Patient portal login webpages accessed through the Redeemer website button for viewing medical records and test results.
• Contact Us forms, including Lafayette and Maternity contact forms used to request information or schedule services.
• Schedule Appointment forms submitted online for booking medical consultations and procedures.

The settlement administrator can verify a potential class member’s eligibility based on Redeemer Health's records of website usage during the class period.

Proposed Settlement Benefits

Cash Payment Option

Each approved claimant can possibly receive a one-time $25 cash payment distributed through multiple convenient methods, including PayPal, Venmo, Zelle, or traditional check for mailed claims.

This payment amount remains the same for all eligible class members, regardless of how extensively they used the affected web properties or what type of medical information they accessed online.

CyEx Privacy Shield Pro Protection

Approved class members can additionally enroll in one year of CyEx Privacy Shield Pro identity monitoring services at no cost. 

The comprehensive protection helps detect potential misuse of personal information that may have been exposed through the alleged third-party data sharing.

The monitoring service includes credit report surveillance, dark web scanning for exposed personal data, alerts about suspicious activity using your identity, and assistance with identity restoration in the event of unauthorized use.